Privacy Notice

In this Privacy Notice we would like to explain to you how we process your personal data when you use this website and its functions.

Introduction

What is personal data?The new General Data Protection Regulation (GDPR) defines in Article 4 Paragraph 1 GDPR in the definitions what is meant by personal data:

“any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; […].”

The use of our website is always possible without providing personal data. Where personal data (such as name, address or e-mail addresses) are collected on our website, this is always on a voluntary basis in accordance with the terms provided.

The transfer of data to third parties is only within the scope of legal requirements. We will only pass users' data on to third parties if, for example, this becomes necessary on the basis of Art. 6 Para. 1 lit. bGDPR is required for contractual purposes or based on legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR for the economic and effective operation of our business operations. We would like to point out that data transmission via the internet (for example, in communication via e-mail) can be subject to security breaches. On the Internet, however, IP addresses are used and cookies are set. By using our website, you agree to the terms of the following privacy policy.

1. Name and contact details of the controller and data protection officer

This privacy policy applies to data processing by the controller:

TICONTRACT GmbHHeisinger Straße 1287437 KemptenGermany

Data protection officer of the controller

Data protection queries can be sent to the data protection officer at TICONTRACT via e-mail to dataprotection@ticontract.com or you can send your request by post to the following address:

2. Collection and storage of personal data and the nature and purpose of its use

a) When visiting the website

When you visit our website www.ticontract.com/en/ the browser used on your device automatically sends information to the server of our website. This information is temporarily stored in what is referred to as a log file. The following information will be collected without your intervention and stored until automated deletion:

·IP address of the requesting computer,

·Date and time of access,

·Name and URL of the retrieved file,

·Website from which access is made (referrer URL),

·Browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The data given is processed by us for the following purposes:

·Ensuring smooth connection to the website,

·Ensuring ease of use of our website,

·Evaluation of system security and stability as well as

·for additional administrative purposes.

The legal basis for data processing here is Art. 6 Para. 1 clause 1 lit. f GDPR. Our legitimate interest arises from the data collection purposes listed above. Under no circumstances do we use the collected data for the purpose of drawing conclusions about you.

In addition, we use cookies and analysis services relating to visits to our website. Further details can be found in sections 4 and 5 of this privacy policy.

b) Registering for our newsletter

If, in accordance with Art. 6 Para. 1 clause 1 lit. a GDPR via our corresponding form www.ticontract.com/en/forms/newsletter/ have expressly consented, we will use your e-mail address to regularly send you our newsletter. This newsletter refers to the field of transport logistics process optimisation for the members given in section 3 of the TRANSPOREON Group, including, for example, industry information, product updates, results of completed analyses, and case studies from reference customers.

I) DOI registration

To register for our newsletter, we use what is known as the double-opt-in-procedure (DOI). This means that after your registration we will send you an e-mail to the e-mail address you provide, in which we ask you via a confirmation link that you confirm your subscription to the newsletter. If you do not confirm your subscription within 24 hours, your information will be blocked and after 1 month it will be automatically deleted. In addition, we store the IP addresses you used and the times of registration and confirmation. The purpose of the procedure is to prove your subscription and to be able to clarify possible misuse of your personal data.

II) Compulsory information

The only requirement for sending the newsletter is your e-mail address. The specification of additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will save your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 Para. 1 clause 1 lit. a GDPR.

III) Revocation of consent / cancellation

You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can cancel by clicking on the link provided in every newsletter e-mail or by e-mail to unsubscribe@transporeon.com.

IV) Tracking by Marketo EMEA Ltd. (see also point 4. on “Munchkin cookies”)

Please note that we evaluate your user behaviour when sending the newsletter. For this evaluation, the e-mails sent include what are known as web beacons or tracking pixels that represent one-pixel image files stored on our website. For the evaluations, we link the user profile and the web beacons with your e-mail address and an individual ID. Links included in the newsletter also contain these IDs. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. In doing so, we record when you read our newsletters, which links you click on and draw conclusions about your personal interests. We link this data with actions you have taken on our website.

You can object to this tracking at any time by clicking on the separate unsubscribe link provided in each newsletter e-mail or by contacting us via another contact method. The information will be stored as long as you have subscribed to the newsletter. Following unsubscription, we store the data purely statistically and anonymously.

c) Use of our information services

If, in accordance with Art. 6 Para. 1 clause 1 lit. a GDPR you have expressly consented to the GDPR via our corresponding form (see table), we will use your e-mail address to inform you regularly about the desired offers. This information (see table) relates to the area of process optimisation in transport logistics for the members given under point 3 of the TRANSPOREON Group and differs as follows:

Live demo If you are requesting a Live-Demo, one of our account managers will contact you by e-mail or phone to illustrate our products and the benefits of using them.www.ticontract.com/en/live-demo/

Training courses As part of training courses, professionals from our Shipper Consulting Team will show you how to maximise the functionality of our e-sourcing tool. During the course you receive access to our demo system and will be able to directly follow and implement the learning content.www.transporeon-group.com/en/trainings/

Webinars A webinar is an online seminar that shows you the latest trends and developments in transport logistics, as well as our products and the benefits that come with using them.go.transporeon.com** Webinars change constantly, meaning it is not possible to provide permanent links.

Fact Sheets/Insights/Whitepapers A Fact Sheet describes the challenges in transport logistics and how you can solve them with the help of our products. It also describes how our products work and the benefits of using them.www.transporeon.com/en/whitepapers/

Case StudiesCase Studies explain the introduction of our products to a reference customer. We describe the situation before the introduction of our products and the results that could be achieved via their use.success.transporeon-group.com/en-gb

Events & trade fairs We regularly invite you to our internally organised Events, workshops and seminars, as well as to externally organised trade fairs and events. These events will provide you with valuable information relating to transport logistics.go.transporeon.com** Events & trade fairs change constantly, meaning it is not possible to provide permanent links.

The further remarks on the newsletter (see section 2b) apply accordingly to registration, mandatory entry, revocation and tracking.

d) Use of our contact form

For questions of any kind, we offer you the opportunity to contact us via a form provided on the website. It is necessary to provide a valid e-mail address so that we know who the request came from and to answer it. Additional information can be provided voluntarily. The data processing for the purpose of contacting us is in accordance with Art. 6 Para. 1 clause 1 lit. a GDPR on the basis of your voluntarily granted consent. The personal data collected by us for the use of the contact form will be automatically deleted after completion of the request made by you.

e) Using our comment function

If you use our comment function, your IP addresses will be stored in the context of legitimate interests within the context of Art. 6 Para. 1 lit. f GDPR and stored for 7 days. We store this data for the purposes of preventing misuse and for our security in order to be able to prevent and, if necessary, track illegal content such as abusive behaviour, extremist or religious propaganda or hate messages. This also serves for our own legal protection.

3. Disclosure of data

We provide the data stored here to our affiliates in the TRANSPOREON Group:

TRANSPOREON GmbHMagirus-Deutz-Straße 1689077 UlmGermany

MERCAREON GmbHPfarrer-Weiss-Weg 1289077 UlmGermany

In addition, no transmission of your personal data to third parties for purposes other than those listed below is carried out. We only share your personal information with third parties if:

·You have explicitly given your consent to do so pursuant to Art. 6 Para. 1 S. 1 lit. a GDPR,

·the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f DSGVO in the event that disclosure pursuant to Art. 6 Para. 1 clause 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have a predominantly legitimate interest in not disclosing your data,

·in the event that disclosure pursuant to Art. 6 Para. 1 clause 1 lit. c GDPR is a legal obligation, as well as

·this is legally permissible and according to Art. 6 Abs. 1 S. 1 lit. b GDPR is required for the settlement of contractual relationships with you.

4. Cookies

a) Session cookies

We use session cookies on our website. These are small files that your browser automatically creates and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our website. Cookies do not harm your device, do not contain viruses, Trojans or other malicious software. The cookie stores information resulting in connection with the specific terminal used. However, this does not mean that we are immediately aware of your identity. The use of cookies serves to make using our online offerings more pleasant for you. For example, we use what are known as session cookies to recognise that you have already visited individual pages on our website. These are automatically deleted after leaving our website. In addition, to improve usability, we also use temporary cookies that are stored on your device for a specified period of time. If you visit our website again to use our services, we will automatically recognise that you have already visited us and what inputs and settings you have made in order to avoid having to re-enter them. Furthermore, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our website offerings (see section 5). These cookies enable us to automatically recognise when you visit our website again that you have already been a visitor. These cookies are automatically deleted after a defined time. The data processed by cookies are required for the purposes stated in order to safeguard our legitimate interests as well as those of third parties pursuant to Art. 6 Para. 1 clause 1 lit. f GDPR. Most browsers accept cookies automatically. However, you can configure your browser so that no cookies are stored on your computer or that a prompt is always displayed before a new cookie is created. However, disabling cookies completely may mean that you will not be able to all the features on our website.

b) Munchkin cookies

This cookie from Marketo EMEA Ltd. (de.marketo.com/unternehmen/) (Cairn House - South County Business Park, Leopardstown Road, Dublin 18, Ireland; hereinafter referred to as “Marketo”) allows us to provide you with targeted advertising, based on your personal activities on our website. We only use Munchkin cookies for targeted advertising cookies if you give your consent, e.g. by registering for our newsletter or other information offerings (see section 2 b, c). The cookie is automatically saved in your browser when you visit our website, but it cannot identify you without your prior consent. This cookie expires 24 months after its storage.

If you do not want cookies stored on your computer, you will be asked to disable the corresponding option in the system settings in your browser. Saved cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this website. You may opt for the use of cookies, which are used for metering and advertising purposes, via the deactivation page of the Network Advertising Initiative (optout.networkadvertising.org) and, in addition, via the US website (www.aboutads.info/choices) or the European website (www.youronlinechoices.com/uk/your-ad-choices/).

5. Analysis tools [“Tracking”]

The tracking measures listed below and used by us are based on Art. 6 Para. 1 clause 1 lit. f GDPR. With the tracking measures used, we want to ensure a needs-based design and the continuous optimisation of our website. Furthermore, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimising our offerings for you. These interests are to be regarded as justified within the meaning of the aforementioned provision. The respective data processing purposes and data categories can be found in the corresponding tracking tools.

a) Google Analytics

For the purpose of the needs-based design and continuous optimisation of our website, we use Google Analytics, a web analysis service of Google Inc. (www.google.com/intl/en/about/our-company/) (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). In this context, pseudonymised usage profiles are created and cookies (see section 4) are used. The information generated by the cookie about your use of this website such as

·Browser type/version,

·Operating system being used,

·Referrer URL (the page previously visited),

·Hostname of the accessing computer (IP address),

·Time of server query,is sent to a server of Google in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage for the purposes of market research and tailoring of this website. This information may also be transferred to third parties if required by law or if third parties process this data in the order. Under no circumstances will your IP address be merged with any other data provided by Google. The IP addresses are anonymised so that no assignment is possible (IP masking). You can prevent the installation of cookies by setting the browser software accordingly; however, we point out that in this case not all features of this website may be fully available. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing a browser add-on (tools.google.com/dlpage/gaoptout).

As an alternative to the browser add-on, especially for browsers on mobile devices, you can prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set that will prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. For more information relating to data privacy in connection with Google Analytics, please refer to the Google Analytics help system (support.google.com/analytics/answer/6004245).

b) Google AdWords Conversion Tracking

To statistically record the use of our website and to evaluate it for the purpose of optimising our website, we also use Google Conversion Tracking. In doing so, Google AdWords will set a cookie (see section 4) on your computer if you have reached our website via a Google ad. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of the AdWords customer's website and the cookie has not expired, Google and the customer may recognise that you have clicked on the ad and have been redirected to this website.

Every AdWords customer receives a different cookie. Cookies cannot be tracked via the websites of AdWords customers. The information gathered using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. AdWords customers are given the total number of users who clicked on their ad and who were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. If you do not want to participate in the tracking process, you can also refuse the required setting of a cookie - for example, via a browser setting that generally disables the automatic setting of cookies. You can also disable cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com". Google's privacy policy for conversion tracking can be found here: services.google.com/sitestats/en.html.

c) Content and service offerings from Google Maps and Google Fonts and other third parties

The third-party content or service offerings, in our case, are Google maps or fonts that we include on our sites (third-party content). This always presupposes that the third-party providers are aware of your IP address, as without them they would not be able to send their content to your browser. The IP address is therefore required for to display this content. We endeavour to use only content whose respective providers use the IP address solely for the delivery of the content. Third parties may use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The "pixel tags" can be used to evaluate information such as visitor traffic to pages on this website. The pseudonymous information may be stored in cookies on the user's device and may include, but is not limited to, technical information about the browser and operating system, referring web pages, visit time, and other information regarding the use of our online offer.

Third party providers as well as links to their privacy statements, which provide further information on the processing of data, are listed below. Options for data removal (known as opt-out) can be found there.

Google Fonts: content are external fonts of Google Inc. that are incorporated into the website: fonts.google.com (“Google Fonts”). The integration of Google Fonts is carried out via a server request with Google (usually in the US). Your browser asks Google servers if there were any changes to the fonts or the CSS file. Privacy policy: policies.google.com/privacy, opt-out: www.google.com/settings/ads/.

6. Social media plug-ins

We rely on our website on the basis of Art. 6 Para. 1 clause 1 lit. f GDPR Social Plug-ins of the social networks Facebook, Twitter, XING and LinkedIn to publicise the TRANSPOREON Group. The underlying commercial purpose is to be regarded as a legitimate interest within the content of the GDPR. Responsibility for the operations compliant with data protection is to be guaranteed by the respective providers. The integration of these plug-ins by us is carried out via what is known as the two-click method to protect visitors to our website in the best possible way.

a) Facebook

Our website uses social media plugins from Facebook (Facebook, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA; hereinafter referred to as “Facebook”) to personalise its use. For this we use the “LIKE” or “SHARE” button. These are provided by Facebook. If you visit a page of our website that contains this type of plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and incorporated by that provider into the website. By integrating the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are currently not logged into Facebook. This information (including your IP address) is transmitted from your browser directly to a Facebook server in the US and stored there. If you are logged into Facebook, Facebook can assign the visit to our website directly to your Facebook account. If you interact with the plugins, for example by pressing the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information will also be posted on Facebook and displayed to your Facebook friends. Facebook may use this information for the purpose of advertising, market research and tailor-made Facebook pages. For this purpose, Facebook uses usage, interest and relationship profiles, e.g. to evaluate your use of our website in relation to the advertisements displayed on Facebook, to inform other Facebook users about your activities on our website, and to provide other services related to the use of Facebook. If you do not want Facebook to assign the data collected via our website to your Facebook account, you must log out of Facebook before visiting our website. The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your related rights and settings options for the protection of your privacy, please refer to the privacy policy (www.facebook.com/about/privacy/) of Facebook.

b) Twitter

Our website includes plugins from short message network Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94103, USA; hereinafter referred to as "Twitter"). The Twitter plugins (tweet button) can be recognised by the Twitter logo on our website. An overview of tweet buttons can be found here: publish.twitter.com. When you visit a page of our website that contains this type of plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our website with your IP address. If you click on the Twitter "tweet button" while logged in to your Twitter account, you can link the contents of our pages to your Twitter profile. This allows Twitter to associate your visit to our website with your user account. Please note that we as the provider of the internet pages are not aware of the content of the transmitted data and its use by Twitter. If you do not want Twitter to be able to associate your visit to our website, please log out of your Twitter account before visiting our website. More information can be found in the privacy policy of Twitter (twitter.com/privacy).

c) XING

Our website also uses plugins from the social network XING (XING SE, Dammtorstraße 30, 20354 Hamburg, Germany; hereinafter referred to as "XING"). When you visit our website, your browser will briefly establish a connection to XING servers with which the "XING share button" functions (in particular the calculation / display of the counter value) will be provided. XING does not store personal information about you by accessing this website. In particular, XING does not store any IP addresses. There is also no evaluation of your usage behaviour via the use of cookies in connection with the "XING share button". The latest data protection information on the "XING share button" and additional information can be found on the website www.xing.com/app/share of XING.

d) LinkedIn

You will find on our website plugins of the social network LinkedIn / LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA; hereinafter referred to as "LinkedIn"). The plugins, especially the Share button of LinkedIn can be recognised by the corresponding logo.

Please note that when you visit our website, the plugin establishes a connection between your browser and the LinkedIn server. LinkedIn is informed that our website has been visited with your IP address. If you click on the "Recommend" button of LinkedIn while logged into your account at LinkedIn, you have the option of linking content from our website to your LinkedIn profile page. Doing so allows LinkedIn to associate your visit to our website with you or your user account. We are not made aware of the content of the transmitted data and its use by LinkedIn. More details on the data collected and your legal options, as well as setting options, please visit LinkedIn. These can be found in the privacy policy (www.linkedin.com/legal/privacy-policy) of LinkedIn.

7. Rights of the data subject

Given below is information on your rights in connection with your personal data:

·According to Art. 15 GDPR, you may request information about your personal data processed by us. In particular, you can provide information on the processing purposes, the category of personal data, the categories of recipients to whom your data has been disclosed, the planned retention period, the right to rectification, deletion, limitation of processing or opposition, the existence of a right to complain, the source of the data, if not collected from us, and the existence of automated decision-making including profiling and, where appropriate, meaningful information about the details

·According to Art. 16 GDPR you can immediately demand the correction of incorrect or complete personal data stored with us;

·In accordance with Art. 17 GDPR you may also request the deletion of your personal data stored by us, unless such processing is for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for assertion, exercise or defence of legal claims is required;

·In accordance with Art. 18 GDPR you are entitled to request the limitation of processing of your personal data, as far as the accuracy of your data is disputed, the processing is unlawful, but you decline the deletion of such data and we no longer require the data, however you require the data for the assertion, exercise or defence of legal claims or if you have objected to the data processing in accordance with Art. 21 GDPR (see section 8);

·In accordance with Art. 20 GDPR, you may receive your personal data provided to us in a structured, standard and machine-readable format or require it to be forwarded to another data controller;

·In accordance with Art. 7 Para. 3 GDPR you can revoke your consent previously given to us at any time. As a result, we are not permitted to continue the data processing based on this consent for the future and

·In accordance with Art. 77 GDPR you can complain to a supervisory authority. You are normally permitted to contact the supervisory authority of your usual place of residence or workplace or our registered office.

8. Right to object

If your personal data is processed based on legitimate interests in accordance with Art. 6 Para. 1 clause 1 lit. f GDPR, you have the right to file an objection against the processing of your personal data in accordance with Art. 21 GDPR provided that there are reasons for this arising from your particular situation or the objection relates to direct advertising. In the latter case, you have a general right of objection, which is implemented by us with no requirement to give a specific reason. If you would like to exercise your right of revocation or objection, please send an e-mail to dataprotection@ticontract.com.

9. Up-to-datedness and changes to this privacy policy

This privacy policy is currently valid and is dated the status of May 2018, and is based on GDPR. As a result of ongoing development of our website and other information offerings, or due to modified legal or official requirements, it may be necessary to change this privacy policy. The current privacy policy can be viewed and printed by you at any time on the website at www.ticontract.com/en/privacy/.